You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by Nixon Rodrigues <ni...@freestoneinfotech.com> on 2021/04/04 17:38:01 UTC
Re: Review Request 73212: RANGER-3195 - Atlas Ranger Authorizer
changes to add/update/remove classification on entities.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/73212/
-----------------------------------------------------------
(Updated April 4, 2021, 5:37 p.m.)
Review request for ranger, Jayendra Parab, Madhan Neethiraj, and Sarath Subramanian.
Changes
-------
Addressed review comments from Madhan and Bhavik
Bugs: RANGER-3195
https://issues.apache.org/jira/browse/RANGER-3195
Repository: ranger
Description
-------
Requirement :- The new requirement is to provide a way to authorize who can Add/Remove/Update Classification for an entity even if the entities on which classification have to be applied do not have classifications already tagged to it.
Solution:-
This will require changes on Ranger Atlas service defination to introduce a new resource "*classifications*" in entity authz model called classifications at level 40 [4th level], with the new classifications resource ranger authorizer will check the classification exist in policy for that add/update/remove classification request to authorize.
Diffs (updated)
-----
agents-common/src/main/resources/service-defs/ranger-servicedef-atlas.json 4ce7ec991
plugin-atlas/src/main/java/org/apache/ranger/authorization/atlas/authorizer/RangerAtlasAuthorizer.java 79ef60465
plugin-atlas/src/main/java/org/apache/ranger/services/atlas/RangerServiceAtlas.java c13633ad2
security-admin/db/mysql/optimized/current/ranger_core_db_mysql.sql 7179dc998
security-admin/db/oracle/optimized/current/ranger_core_db_oracle.sql 40917cdf4
security-admin/db/postgres/optimized/current/ranger_core_db_postgres.sql ba9eb0157
security-admin/db/sqlanywhere/optimized/current/ranger_core_db_sqlanywhere.sql 371846f1e
security-admin/db/sqlserver/optimized/current/ranger_core_db_sqlserver.sql 90004ec77
security-admin/src/main/java/org/apache/ranger/patch/PatchAtlasForClassificationResource_J10047.java PRE-CREATION
Diff: https://reviews.apache.org/r/73212/diff/3/
Changes: https://reviews.apache.org/r/73212/diff/2-3/
Testing
-------
Tested Atlas with Ranger authorization with entities for add, update , add-classification, remove-classification, update-classification events.
Thanks,
Nixon Rodrigues